CryptoLocker Prevention Script for Kaseya

Script downloads utility called CryptoPrevent from,  which when run blocks apps from running from %appdata%, %localappdata%, %programdata% and %userprofile% directories. Protects execution from the startup folder and recycle bin. It also blocks .exe files when opening inside a zip, rar, 7z files, opened from the %LocalTemp% directory. Script writes to script log if successful.   XP Computers REQUIRE A REBOOT!

Blocking is based on best practices that have been discussed on multiple forums.

PLEASE carefully test this script, it BLOCKS applications from running in these directories and may impact good programs.  We also have an UN-protect script in the event you need to reverse it.

(c) Copyright 2013 Network Depot, LLC (dba Virtual Administrator) ALL RIGHTS RESERVED. This script is the property of Network Depot, LLC (dba VirtualAdministrator), and use is restricted to active clients. Do not re-distribute without written authorization.

This script is provided “AS-IS”. Please make sure that you test this script in a controlled environment before deploying to a production environment. Please let us know if you run into any problems.


In order to access this script you will need to be logged in with a paid account.

Script Categories
Content Copyright
2013 Virtual Administrator
Number of Downloads
Script Version
Script Author
Script OS
Script RMM
RMM Version

Search For More Scripts

Generic selectors
Exact matches only
Search in title
Search in content
Search in posts
Search in pages
Filter by Categories
MSP Guides